assigning rights to computer objects

[Guest alfrodull@gmail.com]

Hi,

 

I have a windows 2003 server on a domain. The server has a share and

I want to have scheduled tasks run on windows xp computer that right

to the share. The windows xp computers are also joined to the same

domain.

 

So I have:

 

c:\myshare shared as \\server\myshare

 

What I want to be able to do is setup the security and share

permissions so that scheduled tasks on client1 can write to that the

share. The scheduled tasks on client1 run as "NT AUTHORITY\SYSTEM"

and have to run whether someone is logged in or not.

 

I thought I could just assign write permissions to client1$ in both

the share and security permissions and then the system account on

client1 would be able to write to the share, but that's not working.

 

Is this possible, and if so, where have I gone wrong?

 

Thanks!

[Guest Kyle Hanrahan]

Re: assigning rights to computer objects

 

In the scheduled task i just use a user account that i specifically setup to

do these types of task. That way it doesn't try to use the computer

account, it uses the domain account you specify.

 

Kyle Hanrahan, MCSE, MCTS (SQL 2005)

<alfrodull@gmail.com> wrote in message

news:d649961a-0fcd-4771-8ae1-2a0df4819faf@a35g2000prf.googlegroups.com...

> Hi,

>

> I have a windows 2003 server on a domain. The server has a share and

> I want to have scheduled tasks run on windows xp computer that right

> to the share. The windows xp computers are also joined to the same

> domain.

>

> So I have:

>

> c:\myshare shared as \\server\myshare

>

> What I want to be able to do is setup the security and share

> permissions so that scheduled tasks on client1 can write to that the

> share. The scheduled tasks on client1 run as "NT AUTHORITY\SYSTEM"

> and have to run whether someone is logged in or not.

>

> I thought I could just assign write permissions to client1$ in both

> the share and security permissions and then the system account on

> client1 would be able to write to the share, but that's not working.

>

> Is this possible, and if so, where have I gone wrong?

>

> Thanks!

[Guest Richard Mueller [MVP]]

Re: assigning rights to computer objects

 

 

<alfrodull@gmail.com> wrote in message

news:d649961a-0fcd-4771-8ae1-2a0df4819faf@a35g2000prf.googlegroups.com...

> Hi,

>

> I have a windows 2003 server on a domain. The server has a share and

> I want to have scheduled tasks run on windows xp computer that right

> to the share. The windows xp computers are also joined to the same

> domain.

>

> So I have:

>

> c:\myshare shared as \\server\myshare

>

> What I want to be able to do is setup the security and share

> permissions so that scheduled tasks on client1 can write to that the

> share. The scheduled tasks on client1 run as "NT AUTHORITY\SYSTEM"

> and have to run whether someone is logged in or not.

>

> I thought I could just assign write permissions to client1$ in both

> the share and security permissions and then the system account on

> client1 would be able to write to the share, but that's not working.

>

> Is this possible, and if so, where have I gone wrong?

>

> Thanks!

 

I would assign permissions to the NetBIOS name of the computer. Or, better

yet, you can assign permissions to the group "Domain Computers", which

should include all computers joined to the domain. If the NetBIOS name of

the computer is client1, assign permissions to that trustee. The

sAMAccountName would be client1$, but the trustee is:

 

MyDomain\client1

 

where MyDomain is the NetBIOS name of the domain.

 

--

Richard Mueller

Microsoft MVP Scripting and ADSI

Hilltop Lab - http://www.rlmueller.net

--